Thanks for all your responses! Yes, the GSS proxy is not available on RHEL-6. For the time being, we can live with krb5_renewable_lifetime = 365d.

For my own curiosity, what kind of debugging tips or recommendations included in BZ - https://bugzilla.redhat.com/show_bug.cgi?id=846109, which I can't access with regular Redhat Bugzilla account?


Thanks a lot,

carl


From: Rob Crittenden <rcritten redhat com>
To: dpal redhat com, freeipa-users redhat com
Subject: Re: [Freeipa-users] weird behavior on centos 6
Date: Thu, 15 May 2014 09:46:28 -0400

Dmitri Pal wrote:

    On 05/14/2014 06:12 PM, Carl E. Ma wrote:

        Hello,

Recently I realized our centos 6 freeipa clients hangs randomly. With some research, the issue is related to autofs bug, which was mentioned
        year ago - Automount fails for IPA user when kerberos ticket is
        expired, ssh hangs (https://fedorahosted.org/freeipa/ticket/2980).
        This ticket was closed with comment - "closed defect: invalid".

My workaround is extending ticket_lifetime to 24h and renew_lifetime to 365d. I wonder whether there is better solution or some insights of
        this bug.

        Thanks,

        carl


    Read about GSS proxy.


I don't believe gss-proxy is available for RHEL-6 and backporting is unlikely.


The ticket is closed but the associated BZ is still open, https://bugzilla.redhat.com/show_bug.cgi?id=846109 and has some debugging tips and other recommendations.


rob




_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to